Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fcd09930-f348-4a32-bd2f-ce3d46cc0580.roa
File:                     fcd09930-f348-4a32-bd2f-ce3d46cc0580.roa (raw, json)
Hash identifier:          hKAhgy+z4MhMM4VPgdWroWtRHrW2OA2N/DykkrmqTi4=
Subject key identifier:   74:C9:94:86:F5:A8:CE:54:07:DC:94:88:97:C6:F4:DD:63:0A:F1:14
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       6EFB9B4B93253E7CFE05C591056AA5A55DBC543E
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fcd09930-f348-4a32-bd2f-ce3d46cc0580.roa
Signing time:             Sun 17 May 2026 01:21:03 +0000
ROA not before:           Sun 17 May 2026 01:21:03 +0000
ROA not after:            Sat 15 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        54.239.8.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 31 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:fb:9b:4b:93:25:3e:7c:fe:05:c5:91:05:6a:a5:a5:5d:bc:54:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: May 17 01:21:03 2026 GMT
            Not After : Aug 15 23:59:59 2026 GMT
        Subject: serialNumber=0c696a18068308cc84ff9fb4e31b7400dee80b5430fbd7d2b95f5084221f6051, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:96:dc:a5:88:41:29:69:f3:27:5c:bc:5d:58:
                    92:58:d7:57:c8:ec:73:06:07:d5:3a:0c:09:99:7c:
                    9c:8b:11:4d:77:d3:ef:06:3c:32:79:54:77:ce:42:
                    de:46:b7:c9:cb:4b:f6:92:10:f5:3d:08:8b:9d:47:
                    ce:90:78:9f:28:cd:11:2a:e4:12:cd:24:fb:c6:ea:
                    2a:f9:45:a5:9a:49:cc:78:93:1c:19:75:83:62:90:
                    a4:2b:7f:52:de:c7:24:c8:16:46:d1:d0:83:70:ad:
                    ef:11:c3:df:64:c2:64:9e:21:b8:72:e7:c6:a0:6d:
                    d9:ae:ca:7c:07:d0:a4:f1:b8:b2:29:cc:d1:a6:9e:
                    fc:54:6b:48:ea:b5:5a:c6:04:76:bd:5f:36:ed:7c:
                    d3:74:8a:a7:fe:a1:84:5e:ad:a6:6c:70:ea:0e:5f:
                    ee:45:4e:54:8a:06:dd:4f:ed:58:22:24:10:41:e1:
                    5b:5e:41:65:8a:a4:fa:82:f7:58:32:37:d2:40:69:
                    7d:60:40:70:1d:01:e2:77:80:28:f8:75:e9:16:e6:
                    12:92:ff:12:17:f2:bf:01:6a:0c:de:d0:fd:6f:3c:
                    a0:c1:5c:22:45:56:7a:85:09:cf:3d:86:1c:69:fd:
                    8c:ba:4f:81:5a:a2:0f:c2:1d:d8:ab:91:4c:f8:1b:
                    1e:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:C9:94:86:F5:A8:CE:54:07:DC:94:88:97:C6:F4:DD:63:0A:F1:14
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fcd09930-f348-4a32-bd2f-ce3d46cc0580.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.239.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         ae:a2:44:90:9a:92:c0:82:50:34:b6:9c:e2:09:5f:c4:e9:58:
         07:e5:e6:7b:77:a4:c8:b2:a1:e1:87:7a:21:7c:47:29:ca:04:
         d5:4b:fe:f1:1e:ac:17:23:2e:26:bc:70:a5:e4:5a:9e:a6:11:
         9a:87:b1:87:b4:d5:79:12:ad:23:f7:1b:bd:12:5c:90:c0:e3:
         02:3a:b3:bc:cf:89:9e:c8:2e:ae:4f:77:4f:34:c6:8a:cc:04:
         1c:3e:ba:8d:b2:e8:c5:5c:b9:94:c8:d5:1f:e5:20:6b:75:71:
         77:21:18:80:25:e5:72:94:ab:04:ce:48:ab:c8:51:99:6d:fc:
         08:9a:d3:9e:6d:65:30:ca:bb:a8:83:4d:3b:62:38:96:91:86:
         37:5d:de:27:e9:fc:be:c4:09:78:c1:10:ce:24:f1:55:08:59:
         0a:94:60:c2:4e:af:73:98:c9:3a:12:27:c0:9d:74:39:99:6d:
         90:01:47:d8:0e:3a:db:73:0c:9c:21:19:fb:44:e9:b0:09:36:
         89:21:61:e5:25:f9:74:ff:68:33:5d:ee:14:f6:99:5c:0e:d7:
         f8:96:86:16:12:4f:f1:e4:db:2b:c6:87:61:ff:a9:72:9d:94:
         58:bf:63:88:41:ac:6b:71:05:0e:1e:8c:bd:25:a1:4f:86:45:
         dd:2d:ab:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 30 01:59:21 2026 by rpki-client